PHP-Nuke Web_Links, News, and Download module SQL injection

redhairz · Worker Joined: Nov 17, 2006 Posts: 216

Raven may i ask is this Rn 20202 safe from this report? i thought you all might wana know?

Only registered users can see links on this board!
Get registered or login to the forums!

evaders99 · Moderator Joined: Apr 30, 2004 Posts: 2793

I can confirm that all of these are patched in RavenNuke.

They are also patched in my Nuke Patched Core release.

Finally, it is also patched in the latest Nuke Patched releases (note, you must have downloaded it past April 2007, some previous Patched 3.3 releases before than did not have the appropriate patches implemented)

redhairz · Worker Joined: Nov 17, 2006 Posts: 216

evanders99 thanks for the feedback for rn20202 the last version release was around last year i purpose, you mean there is a latest patch for rn20202? where can i find it?

montego · Posted: Mon Jul 16, 2007 6:37 pm

redhairz, you might want to consider downloading 2.10.01 and doing an upgrade. We are always moving forward and many things have been fixed and made slightly better along the way... Wink

HOWEVER, Always take a backup of everything before you upgrade and I always recommend using XAMPP on your PC and have a copy of your production site running there that you can mess with to get the process down right.

redhairz · Worker Joined: Nov 17, 2006 Posts: 216

montego yea i agee the problem is the upgrading takes up hard works i am not sure i am good at that. sorry what does Xampp do canyou give me some lights? its a good thing i came to know about the Rn nuke and the rest of the Rn community.

montego · Posted: Tue Jul 17, 2007 5:43 am

Do a Google on XAMPP and follow it to the site. It is a full install of Apache, mySQL, PHP4 and PHP5, and other tools. Many of us here use the Windows FULL version as it gives you a complete web operating environment on your PC where you can then mimic your production site. It is excellent for testing out the process for doing almost any kind of change to your site. You can simply take an export of your production site, move it to your PC, and test to your heart's content.

Gremmie · Posted: Tue Jul 17, 2007 6:54 am

XAMPP rocks. Smile

It's a great sandbox to learn and try things like upgrades before you have to do it for real.

evaders99 · Moderator Joined: Apr 30, 2004 Posts: 2793

I am speaking for 2.10.01 ... I don't know whether it is patched for previous versions. We really don't have the energy to maintain more than one active developing branch, so please download the latest version.

redhairz · Worker Joined: Nov 17, 2006 Posts: 216

montego Gremmie evaders99 thanks you very much Smile